CompTIA Server+ (SK0-005) — Question 205

A server administrator notices the /var/log/audit/audit.log file on a Linux server is rotating too frequently. The administrator would like to decrease the number of times the log rotates without losing any of the information in the logs. Which of the following should the administrator configure?

Answer options

• A. Increase the audit.log file size in the appropriate configuration file.
• B. Decrease the duration of the log rotate cycle for the audit.log file.
• C. Remove the log rotate directive from the audit.log file configuration.
• D. Move the audit.log files to a remote syslog server.

Correct answer: A

Explanation

The correct answer is A because increasing the file size allows the log to store more information before rotating, reducing the frequency of rotation. Option B is incorrect as it would lead to more frequent rotations. Option C would stop the log from rotating, potentially causing it to fill up and lose older entries. Option D does not address the frequency of log rotation but rather changes the storage location.